./www/nghttp2-tools, Tools for nghttp2

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 1.41.0, Package name: nghttp2-tools-1.41.0, Maintainer: pkgsrc-users

Tools for nghttp2.


Required to run:
[textproc/libxml2] [net/libcares] [security/openssl] [devel/libev] [textproc/jansson] [www/nghttp2]

Required to build:
[pkgtools/cwrappers] [lang/gcc6]

Master sites:

SHA1: f5cf4fdf6a29adcd810c938736044289a3bf11ff
RMD160: 9d23cd271ac59c4f0c1c4748076d51e356b2fc0b
Filesize: 1602.258 KB

Version history: (Expand)


CVS history: (Expand)


   2020-06-02 21:12:55 by Adam Ciarcinski | Files touched by this commit (4) | Package updated
Log message:
nghttp2: updated to 1.14.0

Nghttp2 v1.41.0

Security Advisory

CVE-2020-11080: Denial of service: Overly large SETTINGS frames

For more information, read the security advisory.

lib

This release implements nghttp2_option_set_max_settings API which sets the \ 
maximum number of SETTINGS entries in one SETTINGS frame to mitigate the \ 
security issue. It also moves SETTINGS flood check earlier to make it more \ 
effective.

The bug which stalls receiving stream data is fixed. Previously, if automatic \ 
window update is enabled (which is default), after window size is set to 0 by \ 
nghttp2_session_set_local_window_size, once the receiving window is exhausted, \ 
even after window size is increased by nghttp2_session_set_local_window_size, no \ 
more data cannot be received. This is because \ 
nghttp2_session_set_local_window_size does not submit WINDOW_UPDATE. It is only \ 
triggered when new data arrives but since window is filled up, no more data \ 
cannot be received, thus dead lock happens.

build

With cmake build, the hard-coded static lib suffix is now optional.

nghttpx

proxyprotocol v2 has been implemented.

The bug in getting certificate serial number with mruby script has been fixed.

h2load

New option, --connect-to, is added.
   2020-06-02 10:25:05 by Adam Ciarcinski | Files touched by this commit (1689)
Log message:
Revbump for icu
   2020-05-06 16:05:09 by Adam Ciarcinski | Files touched by this commit (591) | Package updated
Log message:
revbump after boost update
   2020-03-30 15:59:43 by Adam Ciarcinski | Files touched by this commit (1)
Log message:
nghttp2-tools: remove duplicate distinfo